Inside the New Wave of OSS Attacks

Open source ecosystems are under sustained attack, and the tactics are getting more targeted, stealthy, and developer-focused. 

In this Threat Research Round-Up, ReversingLabs Threat Researchers break down real-world campaigns uncovered in Q1 2026, including npm packages delivering remote access trojans, malicious VS Code extensions stealing secrets, and NuGet-based attacks targeting financial workflows and developer environments.

Watch for a behind-the-scenes look at how these attacks work, how they evade traditional controls and how your team can leverage like our research team does to detect threats.